(Reuters) -Robinhood Markets Inc said on Monday a third party had obtained access to the email addresses of about five million of its customers.
The fee-free broker said the full names of a different group of about two million people were also exposed in the breach, while 310 people had more personal information, including names, birth, dates and zip codes, compromised.
Robinhood (NASDAQ:HOOD) said it believed no social security numbers, bank account numbers, or debit card numbers were exposed and that there has been no financial loss to any customer as a result of the incident, which took place on Nov. 3.
"The unauthorized party socially engineered a customer support employee by phone and obtained access to certain customer support systems," the company said in a blog post, adding that the third party had demanded an extortion payment.
The company's shares fell about 3% in extended trading.